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T INTRODUCTION 


"We have an obligation to manage with Sa le 


President Carter 


Numerous efforts have been in progress for a long period 
of time to improve government's management of its financial 
resources, such as the Joint Financial Management Improvement 
Program which began in 1948. Recently there has been a re- 
newed emphasis. * President Carter has identified nine finan- 
cial priorities in the overall effort to improve existing 
financial management systems.” Included in these nine priori- 
ties are: 


1. Internal control: upgrade control systems to reduce 
the risk of fraud, abuse, waste, and inefficiency. 


2. Audit follow-up: resolve findings promptly and 
properly, and hold down backlog. 


The Inspector General Act of 1978 placed various respon- 
sibilities on all agencies within the government, including 
the military, to identify and report fraud/abuse/waste within 
government.” In compliance with the Act, the Office of the 
Secretary of Defense has expressed an interest in all types of 
self review including the efforts of internal review staffs 
deieche field activity arca 

The Naval Audit Service, as the internal audit organization 
for the Department of the Navy, has continually placed great 
emphasis on examining audited activities systems of internal 
control, of which internal review is a component, at field 


Be ities.? Since the Naval Audit Service is able to audit 





major field activities only about once every three years, and 
all activities within five years, internal review becomes an 


` 


even more important aspect of internal control.’ 


fe OBJECTIVE OF THE STUDY 

At the present, internal review is in a period of growth 
and under closer scrutiny at all levels of government, but it 
still is not at the level of performance needed .° The pur- 
pose of this thesis is to examine the practice of internal 
review within the Department of the Navy, determine its re- 


quirements, and make recommendations regarding its improvement. 


er METHODOLOGY 

The evaluation of internal review will be discussed in 
three basic parts: a.) conceptual foundations in the Private 
Sector and applications in the Public Sector, b.) internal 
auditing and internal review in the Department of the Navy, 
and c.) examination of a Marine Corps Air Station Internal 
Review Division for the purpose of making recommendations for 
improvement, with possible application at similar activities. 

Chapter II discusses auditing and internal auditing in 
the Private and Public Sector with emphasis on the types of 
audits, auditing standards, and the audit process. The simi- 
larities and differences in application in both sectors are 
considered. Research for this chapter consisted of a library 
search of appropriate materials and use of the Defense Logis- 


tics Studies Information Exchange. 
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Internal auditing and internal review are considered in 
Chapter III. The limited description provided by the Depart- 
ment of Defense on internal review is discussed, and apparent 
differences between the Department of Defense and Department 
of the Navy directives on internal review are highlighted. 

The Department of the Navy audit process, which is considered 

by the Department of the Navy to be applicable to internal 
review, is examined. In addition, the present and soon-to-be- 
promulgated Marine Corps Orders are compared, with appropriate 
comments concerning the Secretary of the Navy Instruction. The 
material for this chapter was largely obtained from a library 
search, material from the Defense Logistics Studies Information 
Exchange, phone calls to Headquarters, Marine Corps, and the 
Office of the Director for Internal Audit Policy for the Depart- 
ment of Defense, and material from the Naval Audit Service. 

Chapter IV is a discussion of the Internal Review Division 
of a Marine Corps Air Station organization, staffing, review 
program, and approach to the performance of a review. The 
chapter includes the narrow emphasis at the Air Station on 
Financial resources rather than a more comprehensive approach 
that would include all types of resources. Material for this 
chapter was obtained from the Comptroller and the Internal 
Review Division of the Air Station through the mail, by phone, 
werom a visit to the Air Station by the author. 

The comparison of the case study and the applicable Marine 
Corps Orders and Secretary of the Navy Instruction for internal 


review is contained in Chapter V. The chapter also includes 


T 





= 





recommendations for improvement of Internal Review at both 


the policy-making and operating levels. 
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IIA EDEN" ==" BACKGROUND 


Pr 


Wéi-Wconceptforf accountability for utilization of public 
resources entrusted to government agencies includes not only 
the object of their use but also the manner and effect of 
their ee This idea constitutes a large part of management 
control, which is defined as the process by which assurance is 
made that resources are obtained and used effectively/effi- 
ciently in accomplishment of an organization's objectives. +? 
The essence of management control is the corrective action 
taken to ensure that the performance of an organization con- 
forms with established standards or regui renen ee For such 
action to be taken, information must be made available to all 
levels of management in a timely and reliable form. To ensure 
such reliability, a common method is independent verification 
or audit.!? 

The common understanding of the term "audit" is reflected 
in the following definition: 

"Auditing is an integrated process of accumulating 

and evaluating evidence by a competent person about 

quantifiable information of a specific economic entity 

for the purpose of determining and reporting upon the 
degree of correspondence between the quantifiable in- 
formation and established es 


This function is applicable to both the private and public 


sectors of any economy. 


PRIVATE SECTOR 
The three most recognized types of audits in the private 


sector rt 


iS 





x 
u 
i 





— mn en -iea — -ra zog e E “een ne o 


l. compliance audit 

2. audit of financial statements 

3 operational audit 

The purpose of a compliance audit is to determine if the 
audited entity has been and is complying with rules or proce- 
dures established by higher authority. Usually internal man- 
agement is the chief user of the results of such an audit. 

An audit of financial statements has the purpose of deter- 
mining whether the overall financial statements are correctly 
stated as evaluated in accordance with established criteria, 
usually generally accepted accounting principles. It is this 
type of audit that has been the most highly developed; however, 
the auditing process is applicable not just to financial state- 
ments but also to information systems and to the performance 
of economic activity. This is indicated by the increase in 
the number of operational audits in recent years. ? 

An operational audit is a review of an organization's 
operating procedures and methods for the purpose of evaluat- 
ing efficiency and effectiveness. This type of audit is more 
difficult to plan and execute because of the subjective nature 
of evaluation criteria and the fact that the areas reviewed 
include not only accounting data but organizational structure, 
methods, operations, or any area where the auditor is qualified. 
All of these audit types are undertaken through a framework or 
Generally Accepted Accounting Principles and Generally Accepted 


Auditing Standards. 
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II E o un 


cleo eee ed Aeng Standards 
An auditing standard is a general guideline to aid an 
auditor in fulfillment of his responsibilities. The standards 


were developed by the American Institute of Certified Public 


Accountants (AICPA) and consist of three types:1° 
a. General standards -- personal qualities auditors 
should possess. 
b. Standards of field work -- concern the performance 
of the field work. 
c. Standards of reporting -- deal with the issuance 


of a proper audit report. 
a. General Standards 

1.) The examination is to be performed by a person 
or persons having adequate technical training and proficiency 
as an auditor. 

2.) In all matters relating to the assignment, an 
independence in mental attitude is to be maintained by the 
auditor or auditors. 

3.) Due professional care is to be exercised in 
the performance of the examination and the preparation of the 
report. 

b. Standards of Field Work 

1.) The work is to be adequately planned and assist- 
ants, if any, are to be properly supervised. 

2.) There is to be a proper study and evaluation 
of the existing internal control as a basis of reliance there- 
on and for the determination of the resultant extent of the 


tests to which auditing procedures are to be restricted. 


T5 


3.) Sufficient competent evidential matter is to 
be obtained through inspection, observation, inquiries, and 
confirmations to afford a reasonable basis of an opinion re- 
garding the financial statements under examination. 

C. Standards of Reporting 

1.) The report shall state whether the financial 
statements are presented in accordance with generally accepted 
Aer ounting principles. 

2.) The report shall state whether such principles 
have been consistently observed in the current period in rela- 
tion to the preceding period. 

3.) Informative disclosures in the financial state- 
ments are to be regarded as reasonably adequate unless other- 
wise stated in the report. 

4.) The report shall either contain an expression 
of opinion regarding the financial statements, taken as a whole, 
or an assertion to the effect that an opinion cannot be ex- 
pressed. When an overall opinion cannot be expressed, the 
reasons therefore should be stated. In all cases where an 
auditor's name is associated with financial statements, the 
report should contain a clear-cut indication of the character 
of the auditor's examination, if any, and the degree of respon- 
sibility he is taking. 

Whenever an auditing problem arises of sufficient 
importance to warrant an interpretation of the AICPA, State- 
ments on Auditing Standards are issued, and together with 


Generally Accepted Auditing Standards, form the authoritative 
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literature on auditing. One important point is apparent, and 
this is that there are no specific audit procedures and no 
specific requirements for determining sample size, sample 
selection, or evaluating results. The commonly accepted 
reason for this is that rigid guidelines would limit the use 
of professional judgement of auditors, making an audit a 
mechanistic evidence gathering procedure." More specific 
guidelines are found in less authoritative sources, such as 
textbooks, journals, and technical publications. 

2. Audit Evidence Decisions 

One of the most important judgemental problems facing 
every auditor is the appropriate amount of evidence required 
for a given audit. 1 The problem is one of time and money 
weighed against reasonable satisfaction of an accurate report. 
The evidence accumulation process can be broken into four 
interrelated decisions:1? 

a. Audit procedures to use. 

b. Sample size to select for a given procedure. 

c. Particular items to select from a population. 

d. Appropriate time to perform the procedures. 

In any audit area, there are some procedures that will 
almost always be used, which are called the minimum audit pro- 
cedures. This is sianificant in that auditor judgement deter- 
mines the appropriate procedures to be used in each case, be- 
cause the AICPA has not specified a set of minimum audit pro- 
cedures for each audit area. 

The methodology in choosing a sample may range from 


the highly subjective judgement sample to the more sophisti- 


cated statistical sampling techniques, including use of 
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confidence levels or the more complex Bayesian statistics. 
Regardless of the type of method used, the only differences 
involve the sampling and not the procedures or tests, which 
are determined independent of the sample. However, Judgement 
needs to be applied regardless of methodology. ~° 

This aspect is related to sample size in that items 
may be chosen on the basis of judgement or statistical selec- 
tion. The important concerns are that a representative sample 
is obtained and that items most likely to be in error are 
emphasized. Both are accomplished by taking a larger portion 
of certain types of items, and at the same time including some 
of each type of item. 

3. The Auditor's Decision Process 

An important decision in conducting every audit is 
determining the appropriate amount of evidence to accumulate. 
The decision is based on the degree of responsibility the 
auditor takes for the fair presentation of financial state- 
ments, and the particular circumstances in a specific aude 
Responsibility in performing an audit is generally identified 
as limited to performing the audit and reporting in accordance 
with generally accepted auditing standards. In effect, the 
Standard of evidence accumulation used by most competent 
auditors 1S to continue to the point where the probability of 
material errors existing in the financial statements is low. 


The value of this point is based on judgement. This is cer- 


tainly affected by the existing circumstances of the audit 


18 


pa ee ie Cowen zea Az 


5 z 
A a = a me ae A A non = a So, fee aaa 
7 ae ata NT e E a a e AN AS o N 

th á ano 


= E 





regarding the extent to which external users rely on the 
statements and the likelihood of the audited organization to 
file bankruptcy. 


4. Types of Evidence 


There are seven types of evidence used in audits: 

a. Physical examination -- inspection or count by 
the auditor of a tangible asset; e.g., cash, inventory. 

b. Confirmation -- receipt of a written response 
from an independent third party verifying the accuracy of 
information requested; e.g., accounts receivable, sales 
transactions. 

c. Documentation -- examination of records and docu- 
ments to substantiate information in the statements. 

d. Observation -- use of the senses to assess cer- 
tain activities, such as evaluating inventory for obsolescence 
a checking for rust. 

e. Inquiries -- written or oral information from the 
audited organization in response to questions from the auditor. 

f. Mechanical accuracy -- rechecking a sample of the 
computations and transfers of information made by the audited 
organization during the period under audit. 

g. Comparisons and relationships -- isolation of 
accounts or transactions to be more intensively investigated 
by use of calculations, such as particular expenses in dif- 
ferent time periods. 

5. Overview of the Audit Process 
An understanding of the overall investigation and the 


general audit process is helpful in acquiring the proper per- 
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spective of auditing. Figure 1 is a diagram of the overview 


z This process 


of the audit process in the private sector. 
includes: 


a. Obtain a general understanding of the client and 
its circumstances. 


b. Study and evaluate the system of internal control. 
c. Test the effectiveness of the system. 
d. Directly test the financial statement accounts. 


e. Complete the audit, combine the results of all 
the tests, and draw conclusions. 


f. Issue an audit report. 
a. Obtain a General Understanding of the Client and 
Its Circumstances 
To identify the unique characteristics that affect 
the collection of evidence, the auditor must understand the 
client and its circumstances. The general understanding in- 
cludes four categories: (1) background information on the 
industry and business, (2) analytical tests to test the reason- 
ableness of the financial statement balances, (3) legal com- 
mitments, including government regulations, to determine what 
is required by law, and (4) information collected to evaluate 
the possibility of management involvement in fraud. 
b. Study and Evaluate the System of Internal Control 
The importance of the audited organization's system 
of internal control in generating reliable financial informa- 
tion is one of the most widely accepted concepts in auditing. 
Internal control is defined by the AICPA as " ... the plan of 


Organization and all of the coordinate methods and measures 
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adopted within a business to safeguard its assets, check the 
accuracy and reliability of its accounting data, promote opera- 
tional efficiency, and encourage adherence to prescribed 
managerial policies."?? 
The first step in evaluating an internal control 
system is to determine how the system works. The second is to 
make a preliminary evaluation of how effectively its objectives 
are accomplished, including an assessment of the strengths and 
weaknesses of the system. If after a review of the internal 


control system the auditor's level of confidence is high, the 


amount of evidence to be accumulated can be significantly 


reduced. 

From management's view, the following are objectives 
of an internal control system: (1) to provide reliable data for 
decision making, (2) to safeguard assets and records, (3) to 


promote operational efficiency, and (4) to encourage adherence 
to prescribed policies. In complying with the second standard 
of field work, which concerns the evaluation of existing in- 
ternal control, the auditor is concerned primarily with the 
first two of management's internal control objectives -- 
reliability of data and safeguarding assets and records for 
the purpose of fair presentation of financial statements. 

Arens and Loebbecke have identified seven elements 
of an internal control system that are required if the four 


objectives of internal control are to be > 
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1. Competent, trustworthy personnel with clear lines 
of authority, which is the most important element 
Since such personnel will perform with few other 
controls to support them while the opposite is not 
tue. 


2. Adequate segregation of duties for the prevention 
of intentional or unintentional errors, such as 
separation of operational from record keeping 
responsibility, separation of custody of assets 
from accounting, separation of the authorization 
of transactions from the custody of related assets, 
and the separation of duties within the accounting 
Fünerlon, 


See Gomer preccaures for authorization for all trans- 
actions. 


4. Adequate documents and records. 


5. Proper procedures for record keeping. 
6. Physical control over assets and records. 
7. Independent checks on performance with an essential 


characteristic of independence from responsibility 
of preparation of the data, such as an internal 
audit staff. 
c. Test the Effectiveness of the System 
When a control has been identified as effective 
by an auditor, he may rely on the control and consequently 
reduce the extent to which it must be tested. To justify this 
reliance, the effectiveness of the control must be tested using 
tests of compliance. These tests check if the control is ap- 
plied consistently, applied properly, and that the person 
responsible for the control is independent of incompatible 
duties. 
d. Directly Test the Financial Statement Accounts 
The balances of the different items in the finan- 


cial statements should be verified by the various types of 


evidence available. If the auditor has obtained a reasonable 
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level of confidence about the fair presentation of the finan- 
cial statements through the general review of the internal 
control and tests of its effectiveness, the direct tests of 
balances can be significantly reduced. In all cases, however, 
some tests of the accounts are necessary. 

e. Complete the Audit, Combine the Results of All the 
Tests, and Draw Conclusions 

The auditor must combine with the direct tests of 

financial statement balances the results of previous tests, 
and any significant changes after the end of the period to 
form an overall opinion. This is a highly subjective process 
that requires professional judgement. 

f. Issue an Audit Report 

The audit report reflects the opinion of the audi- 
tor on the overall fairness of the presentation of the finan- 
cial statements and is subject to some well-defined technical 
requirements as to specific content. Such requirements con- 
sider the independence of the auditor, the scope of the audit, 
compliance with and consistent use of generally accepted 
accounting principles, and unusual uncertainties affecting the 
financial statements. 
6. Effect of Computer Systems on Auditing 

The continual growth in the use of computers for 
accounting and financial applications makes an understanding 
of the impact of this use on auditing very important. The 
auditing concepts applicable to computer applications and 


those applicable to manual systems are the same, but the 
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specific methods to implement the basic concepts are 
EB eterent. ”’ 

The objective of the review of internal control in 
a system using a computer is the same as a manual system, 
which is to determine the audit evidence that should be 
collected on the basis of the adequacy of existing controls. 
A general understanding of the system is obtained from flow- 
charts, questionnaires, and error listings. Of the three, 
the only one unique to a computer system is the error listing, 
which is a list of the actual errors reported by the system. 
This supports the other two, since flowcharts emphasize the 
organization of the company and internal questionnaires 
emphasize specific controls without relating individual con- 
trols to one another. After the preliminary understanding 
is obtained, the relationship of non-computer controls must 
be evaluated relative to computer controls. When the auditor 
actually conducts the audit, he can audit around or use the 
computer. 

Auditing around the computer is simply using the same 
procedures as in a manual system. This can be done when 
source documents are available in human readable form, the 
documents are filed so they can be located for auditing, and 
the output is detailed enough to trace individual transactions 
from source document to output and vice versa. 

There are two well-known methods to test a system by 
Meng a computer. The first is the use of fictitious or test 
data on currently used programs, with the purpose of evaluat- 


ing the capability to handle different types of transactions. 
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The second is the use of a separate program to process the 
Wwééé-Wtransactions on the same files to verify the original 
results. Another but more experimental method is the estab- 
lishment of a separate entity with fictitious data to be 
processed with real data of the audited organization. The 
decision of which method to use is made by the auditor on 
the basis of professional experience. 

in Internal Auditing 

Internal auditors are employed by management in a 
staff capacity to provide an organic audit capability. Arens 
and Loebbecke describe the difference between an internal 
auditor and an external auditor as the degree of independence 
possessed by the oo The Institute of Internal Au- 
mimeors, Inc., (IIA) is more eee ee 

Internal Auditing is an independent appraisal 

function established within an organization to 
examine and evaluate its activities as a service 

to the organization. The objective of internal 
auditing is to assist members of the organization 

in the effective discharge of their responsibilities. 
To this end, internal auditing furnishes them with 
analyses, appraisals, recommendations, counsel, and 
information concerning the activities reviewed. 

In addition the responsibilities of internal auditors 
include providing information about the adequacy and effective- 
ness of the organization's system of internal control and the 
quality of performance. In an effort to assist internal au- 
NOTES in the conduct of audits, the IIA has published "Stand- 
ards for the Professional Practice of Internal Auditing," 


which are applicable regardless of the organizational environ- 


ment. 
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a. Standards for the Professional Practice of 
Internal Auditing 

The IIA Standards are arranged with five general 
Standards, each accompanied by specific Standards. The five 
General Standards include: 

1.) Independence. Independence includes the 
mental attitude, as in the second AICPA General Standard of 
Generally Accepted Auditing Standards, but also includes 
organizational status. Internal auditing should be respon- 
sible to an individual in the organization that can insure 
independence in every aspect of the audit. In addition, the 
head of internal auditing should have direct communicatıon 
with the highest level of management to assure independence 
and information flow. These conditions are made possible 
through the use of a formal written document defining organi- 
zational position, access to any required material/personnel, 
and the scope of the internal auditing activities. 

2) Massena Proficiency- This Standard in- 
cludes the same considerations as the AICPA's first and third 
General Standards of the Generally Accepted Auditing Stand- 
ards, which concern training, proficiency, and due professional 
care. In addition, it includes the first part of the AICPA's 
first Standard of Field Work relating to the supervision of 
audit work. The IIA's Standard includes the necessity of 
evaluating the scope of work to be done, the level of respon- 
sibility, and the technical skills required for audits to be 


performed. Included under supervision are the requirements 


2 





for authorizing and justifying deviations from approved audit 
plans, complete working papers, and accurate, timely reports. 

Due professional care encompasses the use of the 
Bine and skill expected of a reasonably prudent and competent 
internal auditor. This includes being alert to the possi- 
bility of intentional wrongdoing, errors and omissions, in- 
efficiency, waste, ineffectiveness, and conflicts of interest. 

3.) Scope. This includes the examination and 
evaluation of the adequacy and effectiveness of the organiza- 
tion's system of internal control and the quality of perform- 
ance in carrying out assigned responsibilities. Essentially, 
this includes the elements of the second AICPA Standard of 
Field Work and the second and third elements of the overview 
of the audit process shown in Figure 1. Particular emphasis 
is placed on management's objectives for its internal control 
system, as previously identified in the discussion on internal 
control. 

4. Performance. Included in this Standard are 
the planning aspect of the first AICPA Standard of Field Work, 
the third AICPA Standard of Field Work relating to evidence 
dellllection, and the first, fifth, and sixth elements of the 
Overview of the audit process reflected in Figure 1. This 
Standard also includes establishing audit objectives and scope 
of work, writing the audit program, discussions with audited 
management prior to issuance of a report regarding conclusions 
and recommendations, and the requirement for follow-up action 


to determine whether or not appropriate action is taken. 
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5.) Management. The first step in the manage- 
ment of internal auditing is insuring that top management 
establishes, with the formal written document discussed in 
Independence, the purpose, authority, and responsibility of 
internal auditing. Using this information, plans should be 
established to fulfill management's requirements and should 
include goals, audit work schedules, staffing plans and 
financial budgets, and activity reports. 

Goals should be measurable and have specific 
criteria. Audit work schedule priorities should take the 
following into consideration: a.) the date and results of 
the last audit, b.) financial exposure, c.) potential loss 
and risk, d.) requests by management, e.) major changes in 
the area of concern, f.) opportunities to achieve operating 
benefits, and g.) capabilities of the audit staff. 

Staffing plans and financial budgets include the 
number of auditors, technical capabilities required, and 
financial resources required. These plans should be deter- 
mined from the work load required in internal auditing. 

Periodically, activity reports should be submitted 
to top management comparing performance with goals and audit 
work schedules, and expenditures with budgets. Major variances 
and required action should be explained. 

A final internal auditing requirement is to de- 
velop a quality assurance program to evaluate internal audit- 
ing operations on the basis of conforming to the Standards, 


the formal written document from top management, and other 
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appropriate standards. This is accomplished by continual 
supervision of all internal audits, periodic local evaluation 
of internal auditing, and external appraisals by qualified 
persons independent of the organization at least once every 
three years. 

b. Additional Considerations 

Lawrence B. Sawyer maintains that successful in- 

ternal auditing dern 

... eonstructed on a foundation of technical excel- 

lence. But the structure must be firmly buttressed -- 

on one side by demonstrated acceptance and support at 

the highest levels in the enterprise; on the other by 

continued, imaginative service to management. Each 

of the two buttresses is an integral member of the 

structure. Let one weaken and the structure may tilt, 

ready to fall at the first hard blow from the winds of 

retrenchment and cost reduction. 

Sawyer provides numerous tools and methods for 
attaining such a structure. Three such important tools, not 
previously discussed, are the drafting and use of audit 
manuals, use of audit programs, and preparing long-range 
programs. The first two are guides in the performance of an 
merna] audit, while the third is an instrument with mul- 
le applications. 

1.) Audit Manuals. Audit manuals provide instruc- 
tions and guidelines for the operation of the internal audit- 
ing organization. Such instructions can be divided into three 
groups: a.) technical functions, b.) administrative functions, 
Amare.) miscellaneous functions. 


ice laude manual covers technical func- 


tions and provides a guide for the performance of an audit. 
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It includes all phases of the audit from objectives, theory, 
and scope to the use of audit programs and issuing reports. 
An example of the type of information included in such a 
manual (under the topic audit programs) might include the 
requirements for each individual audit program to be tailored 
to each assignment, and the need to determine operating ob- 
jectives, the related required controls, and the details of 
the prograns. 

Another set of instructions needed to provide 
guidance for areas related to but not actually involved in 
the performance of internal audits is that covering adminis- 
trative functions. Such items that are ordinarily included 
Ame instructions for office administration, personnel, audit 
projects, and audit reports. Instructions under audit reports 
might specify guidelines for interim reports, supervisory 
review of reports, and report distribution. The manual often 
takes the form of a compilation of staff memoranduns. 

In addition to the two previous types of functions, 
Gm@enthard type includes all that do not fall in the other 
categories. These instructions may amplify, explain, or re- 
Strict statements in the other manuals or may cover areas not 
included in the other two. Such items as organization in- 
formation, auditing methods and techniques used, report formats, 
and coordinating instructions are included under miscellaneous. 

2.) Audit Programs. An audit program is a detailed 


plan OL action for the actual conduct of an audit. The purpose 
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is to serve as a guide and control for an audit. It can be a 
pro forma type for functions that are substantially the same 
over a long period of time but are usually tailored for a 
specific audit. Each program should include the theory of 
the audit and should be able to determine if management's 
objectives are being carried out and whether adequate and 
effective controls exist that will provide assurance that 
objectives will be met. 

ey elon. nance Programs. Algood long-range pro- 
gram serves many purposes. It can be used to spell out in 
detail the audits that are to be conducted, thereby simplify- 
ing resource requirements and insuring that no significant 
area is overlooked. It can be used as a justification for 
budget allocation. It can also be a valuable tool for justify- 
ing an increased staffing level. 

All long-range programs should be approved by the 
policy-making level of management. This provides management 
with a preview of audit coverage in each area of responsibility, 
gives management opportunities to comment on scheduling and 
coverage, and when accepted, becomes a commitment by manage- 
ment. 

Such programs also serve as standards for measur- 
ing audit performance, a control over the actual operating of 
auditing, and a notice to external auditors as to the opera- 


ASNO? internal auditing within an organization. 
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ce onor Auditing. TÉ possible, the time for 
internal auditing to become involved with computer operations 
is during the acquisition process. Only at this time can the 
company's goals and objectives be related to the system that 
MN corporated. «In addition, proper controls must be built 
into the system, not added on at some later date. 

Additional considerations must be made concerning 
computer security and disaster control, as well as other con- 
trols, such as operational controls. The increasing dependence 
on computer systems subject organizations to greater losses 
or even "total corporate amnesia" in the event files are 
destroyed. These controls include such things as restricting 
access to the computer room and duplicate, vital records 
Seemed at protected, off-site locations. In addition, other 
types of controls, such as separating the personnel designing 
and programming from the computer itself, can reduce possible 
malfunctions of the system and improve its integrity. 

Thus far, this discussion has included only concepts 
developed in the private sector. The next section discusses 


those concepts applicable to the public sector. 


DR PUBLIC SECTOR -- THE FEDERAL GOVERNMENT 

Auditing in the Federal Government is performed by the 
General Accounting Office (GAO) which reports directly to 
Congress. The authoritative compilation of GAO's basic 
policies, standards, and requirements for auditing and eval- 


uating Government organizations, programs, activities, and 
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functions is published in its Comprehensive Audit Manual.” 


The GAO Manual For Guidance Of Federal Agencies promulgates 
accounting principles, standards, and related requirements, 
and material for the guidance of Federal agencies in the 
development of their accounting systems and internal auditing 
programs; uniform procedures for use by Federal agencies; and 


regulations governing the relationships of the GAO with other 


Federal IS 
1. Purposes and Objectives of Audits 


There are two primary purposes of audits in the Fed- 
eral government as defined in the GAO Manual for Guidance of 
Federal Agencies: a.) to evaluate the efficiency, economy, 
legality, and effectiveness of Federal agencies, and b.) to 
assist Congress and Federal agency officials in carrying out 
their responsibilities by providing objective and timely in- 
formation, including conclusions and recommendations. 

Each agency is responsible for its operations, includ- 
ing management, development, and maintenance of adequate sys- 
tems for accounting and internal control. In evaluating an 
agency, the GAO will conduct an examination in three broad 
categories: 

a. Financial operations and legal compliance 

b. Efficiency and economy of operations 

E Program results 

The financial operations and legal compliance audit 
is similar in some aspects to the private sector compliance 
audit in that a check is made to insure all legal require- 


ments are met in an agency's operations. It is also similar 
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to the financial statement audit in that accounting systens 
and financial reports are evaluated. 

Audits of efficiency and economy are the same as the 
operational audit. Here operations are evaluated also in 
the light of applicable laws and regulations. 

Audits of program results relate directly to programs 
approved and funded by Congress. Programs are evaluated 
against established program objectives. 

In evaluating these various categories, the GAO uses 
a basic audit approach. 

2. Audit Approach 

The following broad phases of work are used by GAO in 
Fonduceting an eat : = 

a. Survey -- obtaining working information on the 


activity or program to be examined and checking 
for items that require a closer evaluation. 


b. Review -- detailed examination. 
C. Report -- communication of results, including 
recommendations. 


The Survey phase includes gathering general working 
information, studying legislation applicable to the agency, 
and preliminary testing of management controls. The first two 
elements correspond to obtaining a general understanding of 
the client in the overview of the private sector process. In 
addition, preliminary testing is the same as the study and 
evaluation of the system of internal control in the overview. 

The Review phase consists of detailed examinations in 
which emphasis is placed on reviewing and testing procedures, 


accounting systems, reporting, internal review, and other 
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elements of internal management control. This corresponds 
to the test of effectiveness phase of the private sector over- 
view, as well as the direct testing phase. The Report phase 
is self explanatory. 
5 Standards 
The GAO in its Standards for Audit of Governmental 
Organizations, Programs, Activities and Functions has published 
a body of audit standards applicable to all audits in the 
Bovernment. >> These standards include the Generally Accepted 
Auditing Standards published by the AICPA but include addi- 
tional standards. The essence of these additions are discussed 
below. 
a. General Standards 
The audit of a government agency will include an 
evaluation of the three previously discussed types of audits 
in the government, financial and compliance, efficiency and 
economy, and program results. The scope of each audit should 
take into consideration the needs of the potential users. 
b. Examination and Evaluation Standards 
A review should be made of operational compliance 
with legal and regulatory requirements. This includes federal, 
and where applicable, state requirements and grant arrangements. 
Included in the characteristics of a satisfactory 
system of internal control is the inclusion of an effective 
system of internal review, which corresponds to the Arens and 


Loebbecke seventh element of internal control of "independent 
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checks on performance." The GAO Standards do not define in- 
ternal review but describe it as in the nature of management 
services assisting in supervising, advising, and reviewing 
designated functions. Internal review should be evaluated 
as a part of internal control to determine the degree of 
reliance justified by an auditor. 

The GAO Comprehensive Audit Manual does not pro- 
vide a specific definition of internal review, either, but it 
does provide a more detailed description by providing some 


36 Cao context, internal 


basic principles and policies. 
review refers to, from an agency perspective, an independent 
meview, such as internal audit, of all other elements of 
management control. All types of review within an agency, 
including internal audit, should be coordinated and the work 
done by each clearly defined to prevent duplication of effort 
and jurisdictional disputes. It should be noted that this 
discussion relates to top management at the agency level. 
c. Reporting Standards 

Here the greatest differences between the private 
and public sector appear. In addition to the standards con- 
cerning financial reports, the GAO Standards require written 
puget reports for the arranging or requiring organization, 
officials responsible for action, others authorized to receive 
the reports, and where not prohibited by law or regulation, 
public inspection. These reports will be made on or before 


the dates specified by law. 
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Each report will be clear, concise, accurate, 
complete, fair, objective, and factual. Recommendations with 
emphasis on improvement and recognition of noteworthy accom- 
plishments will be included. In addition, the scope and ob- 
jectives of the audit will be explained, and a statement will 
be included covering the reasons for any omitted significant 
Mmiormation. 

A summary of these Government Audit Standards is 
also included in the GAO publication Internal Auditing in 
Federal Agencies. >! 

4. Internal Auditing in Federal Agencies 

The GAO Manual for Guidance of Federal Agencies in- 
cludes guidance for internal auditing in the federal govern- 
meme. °° The role of internal auditing is essentially the same 
as in the Private Sector, with emphasis on its function as a 
Supplement to routine management checks on operations. 

Virtually all the aspects of internal auditing as 
discussed in the Private Sector are covered in the GAO Manual 
with the following exceptions: a.) audit work schedules, b.) 
meeting plans and financial budgets, c.) activity reports, 
and d.) a quality assurance program. Even so, the conceptual 
validity and applicability to government operations is apparent. 

In addition, the chapter in the GAO manual on internal 
auditing includes all the aspects covered in the section on 
auditing in the federal government. There is additional 


emphasis, however, on efficiency and economy and program 
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results audits. There is an emphasis on centralization of 
internal auditing at the agency level with a provision that a 
separate staff may be established at an organizational com- 
ponent of an agency. The central internal audit activity of 
the agency, however, should be accountable for furnishing 
general policy direction and coordinating the efforts of such 
a staff. The work of such a subordinate staff should be 
evaluated by the top internal audit activity. In addition, 
the coverage by the subordinate staff should be included in 
the scope of audit activity provided for top management. 
5. Effect of Computer Systems 

As in the private sector, auditing objectives remain 
the same in audits of organizations using computer systems, 
but the procedures may be different. The GAO Comprehensive 
Audit Manual places emphasis on the examination of the func- 
tioning of the system and validation of data produced by the 
system. >> Consideration should be given to the importance of 
the data in the organization's decision-making process and 
the risk involved in using inaccurate information. No specific 
methodology is discussed, but emphasis is placed on control 
procedures as part of internal control. These procedures are: 

a. Plan of organization and operation of the system 

b. Procedures for documenting, reviewing, testing, 

and Changing and approving systems or programs 

c. Controls built into the hardware 

d. Control over access to equipment and files 

e. Application controls for tasks relating to 

IMP Processing, and output 

All relate to the discussion of the private sector concept of 


understanding the systems, the computer controls, and non- 


Semputer controls. 
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The importance at the agency level of internal auditing 
as part of internal control was emphasized with the formal 
tasking of each executive agency head for establishment of 
appropriate internal audit by the Budget and Accounting Pro- 


40 


cedures Act of 1950. The Department of the Navy has been 


upgrading its internal auditing since that time. 
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TILES INTERNAL AUDITING/INTERNAL REVIEW 
IN THE DEPARTMENT OF THE NAVY 
"Regarding audit, the law places responsibility for the 
internal audit function under the Comptroller of the Depart- 
ment of Defense, requires each of the military departments to 
conduct internal audits in a manner consistent with that of 
the Comptroller of the Department of Defense al 
Additional authority for internal audits in the Department 
of the Navy was provided by the Budgeting and Accounting Pro- 
cedures Act of 1950 in establishing appropriate internal audit 
as part of effective control over and accountability for all 


resources. The Naval Audit Service performs this function for 


the Department of the Navy (including the Marine Corps). 


DEPARTMENT OF DEFENSE 
fr AUdit Policies 
The Department of Defense (DOD) Directive 7600.2, 

"Department of Defense Audit Policies," August 7, 1978, covers 
the establishment of the Defense Audit Service, updates audit 
policies, and clarifies organizational responsibilities. ’7 
In addition, it prescribes basic policies for internal audits 
DOD and DOD Components. It provides that the basic criteria 
For both audit coverage and operations will be the Standards 

for Audit of Governmental Organizations, Programs, Activities 


and Functions, which were previously covered in the discussion 


enethe Public Sector. 
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The directive further provides that the internal audit 
responsibilities for each Military Department, with the excep- 
tions of Unified and Specified Commands, will be carried out 
by a single audit organization. This organization will report 
to the Department Secretary or Under Secretary and will receive 
technical guidance and supervision from the Assistant Secretary 
having financial management responsibilities. 

Internal audit is identified as having the purpose of 
providing management with an independent, objective, and 
constructive evaluation of the economy, efficiency, and effec- 
tiveness with which managerial responsibilities are being 
carried out. It involves examining, evaluating, and reporting 
(including recommendations) on any area that has an impact on 
the use of all types of resources and the accomplishment of 
management objectives. Emphasis generally will be directed 
to determining that management controls are adequate in con- 
cept and effective in application. 

2. internal Audit 

Expanded guidance for internal audit is provided in 

DOD Instruction 7600.3, "Internal Audit in the Department of 


Defense," January 4, 1974, over that given in DOD Directive 


feoo.2.°° All internal audit responsibilities within each 
military department will be fulfilled by a single internal 
audit organization to assure independence and avoid duplication. 


In this regard, the terms "audit" and "auditing" cover a 


variety of activities, some of which are not considered as 
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part of "internal auditing" by DOD Instruction 7600.3. These 
activities include: 
a. Administrative examinations of transactions, 
vouchers, etc., which are part of regular op- 


eRarlomswor internal control. 


b. Inspector General and Procurement Management 
Review Program inspections and investigations. 


C. Technical surveys and inspections by various 
staff elements in performance of their nor- 
mally assigned duties. 

d. Internal review at lower echelons. 

In addition responsibility for audit of nonappro- 
priated fund activities may be delegated to lower management 
levels. 

a. Internal Audit Responsibilities, Mission, and 
Scope 

Internal auditing is a staff function whose res- 
ponsibilities include examining, observing, reviewing and 
evaluating all aspects of management for the purpose of re- 
porting findings and making recommendations. Management 
responsibilities remain with management. The heads of internal 
audit organizations will develop and execute plans, policies, 
procedures, and programs necessary to discharge internal audit 
responsibilities. 

Internal audit is the independent review and 
evaluation of the effectiveness and efficiency of management. 
It 1S an independent appraisal that is directed toward deter- 
mining that management controls, practices, and procedures 


are adequate in concept and effective in application. It 
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should insure that such controls provide for adequate finan- 
cial integrity and effective utilization of resources. 
b. Audit Approach 

Internal audit activities should be directed 
toward identifying, reporting, and making appropriate recom- 
mendations regarding conditions concerning inefficiency, de- 
ficiency, and errors. The primary consideration should be 
the prevention of deficiencies with secondary concern for 
detection of past deficiencies. Detailed examination will 
be limited to the extent necessary as revealed by appraisal 
of the system of internal control. 

Contrary to the concept of auditing in the private 
sector, where the purpose is reliability of financial state- 
ments, the principal purpose of internal auditing ordinarily 
will be to appraise the effectiveness of management. If 
management controls and the accounting system are effective, 
reliance can generally be placed on the financial statements 
produced. 

3. Internal Review 

"Management at lower echelons is not precluded from 
establishing groups which, while not performing independent 
Or comprehensive audits, would serve as 'troubleshooters' 
who make special analyses in comptroller and other areas and 
assist in correcting deficiencies which are revealed by audits, 
reports, analyses, observations or other means. In authoriz- 
ing such internal review activities at any echelon, care 


should be exercised to assure avoidance of duplication of 
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internal audit functions as defined below which are assigned 
to the centralized audit organizations. "4 

The above quote and the internal audit functions to 
which it refers are included in Appendix A. The precise 


meanings of the term "internal review," its appropriate 
elements and relation to internal auditing are presently under 
debate and a matter of controversy, as is the meaning of 
Wblication of internal audit functions." "> 
A draft copy of the Study of the Operations and 
Relationships of Audit, Inspection and Review Groups in the 
Department of Defense of 3 November 1978 by the Department 
of Defense Joint Study Group on Audits, Inspections and 
Reviews reveals some of the complexities involved.*® The 
study of internal review was from the perspective that the 
only activities authorized were strictly limited to special 
analyses in comptroller and related areas and assisting in 
correcting deficiencies discovered by means other than 
internal review. The study found that there was no common 
understanding of the meaning of internal review and concept 
wori zed by DOD Instruction 7600.3. The fourth alternative 
provided by the study was to clarify DOD policy to explicitly 
define and limit the functions of internal reviewers. This 
alternative was not recommended, because local commanders 
need to have professional auditors available and the Army and 


Navy had not followed DOD audit policy in the past. The 


study found that the Marine Corps was at that time following 
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policy and did not duplicate the work of the Naval Audit 
Service but did not meet audit standards. The Army was found 
to produce the highest quality work of the services with 
internal review but duplicated the type work of the Army Audit 
Agency. The two recommended alternatives were to consolidate 
existing internal review assets with the internal audit or- 
ganization or authorize internal reviewers to function as 
local internal auditors by revising DOD policies. The first 
alternative was preferred due to the advantages of centralized 
eontrol. 

within the framework established by the first para- 
graph in this discussion of internal review and surrounded by 
the lack of common understanding of the meaning and concept 
of the functions of internal review activities authorized by 
DOD, the Military Departments were to establish internal 


review, if desired. 


ERZZDEPARTMENT OF TAE NAVY 

In accordance with policy established by DOD, the Naval 
Audit Service (NAVAUDSVC) performs the internal audit func- 
tion for the Department of the Navy as directed by the Navy 
Comptroller (NAVCOMPT) Manual Volume I. This directive also 
designates internal review as a responsibility of Command to 
be performed at all installations.”’ 

ie Internal Audit 

The Secretary of the Navy Instruction (SECNAVINST) 


7510.7A, Department of the Navy Audit Manual for Management, 
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28 December 1978, prescribes policies and procedures for the 
management of audit in the Department of the Navy. 48 The 
stated purpose of internal audit in the Department of the Navy 
is the same as that which is established by DOD Directive 
7600.2 and DODINST 7600.3. This is to be accomplished through 
objective reports, constructive recommendations, and consulta- 
tion for management in planning action on findings and recom- 
mendations. This emphasis on assistance to management has 
resulted in the Secretary of the Navy (SECNAV) policy to 
conduct internal audits on a mission-oriented basis. That is, 
every aspect of each audit is to be guided by the mission of 
the audited organization, so that those functions of primary 
concern to management at all levels will receive audit atten- 
tion. In addition, supplementary coverage is provided by 
fiduciary-type audits, such as disbursing and commissary 
stores, and Morale, Welfare, and Recreation fund activities. 
The same auditing principles, policies, standards, and pro- 
cedures that apply to internal audit also apply to internal 
review. 
2. Internal Review 

The policy and guidelines for Internal Review in the 
Department of the Navy are prescribed by SECNAVINST 7510.8, 
"Internal Review in the Department of the Navy," 15 October 
MO it 1S the policy of the Secretary of the Navy that 
Internal Review, as a fundamental element of comptrollership, 
be implemented to insure proper administration and utiliza- 


50 
tion of resources. 
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a. Definition and Discussion 
"Internal Review is the conducting of special 

audits, studies, analyses and investigations of 

financial operations and the use of command re- 

sources to detect deficiencies, improprieties and 

inefficiencies, and to provide recommendations in 

order to correct conditions that adversely impact 

on financial management, mission accomplishment, 

or the integrity of command. "> 

This definition adds to the uncertain discussion 

of internal review in DODINST 7600.3, which was previously 
discussed. "Special analyses" have been expanded to include 
"special audits, studies ... and investigations." Internal 
review also now includes detection of deficiencies in addi- 
weno their correction. The DOD discussion includes " 
care should be exercised to assure avoidance of duplication 
of internal audit functions son 22 while SECNAVINST 7510.8 
states "Internal Review may complement but not intentionally 
duplicate the responsibility of centralized audit organiza- 
tions such as the Navy Audit Service, and as first priority 


Should always serve command. ">? 


In addition, guidance is 
added that reviews should be independent, thorough, profes- 
sional, and detailed so that duplicative reviews by auditors 
external to the command can be minimized. 

Resources for performance of internal review will 
be made available from within available resources. Planning 
will be subject to semiannual command review and approval 
insofar as practical. Also, various headquarters' elements 


may issue supplementary guidance to subordinate commands to 


meme COmpliance with SECNAVINST 7510.8. Flexibility will 
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be planned so special reviews can be scheduled to be respon- 
sive to special circumstances. 
p Functions 

Internal review will normally be implemented at a 
field activity by the Comptroller for the Commanding Officer. 
"Internal Review will be responsible for examining internal 
management controls, practices, and procedures at all levels 
to determine adequacy in concept and effectiveness in applica- 


„4 


Mon. This is almost an exact repeat of the description 


given of internal audit in DODINST > Both also in- 
clude the need to provide for financial integrity and effec- 
tive use of resources. Included in the SECNAV instruction 


are: 


l.) Audit of civilian timekeeping and payroll and 
certain nonappropriated funds. 


2.) Monitoring correction of deficiencies revealed 
by agencies external to the command. 


3.) Monitoring and evaluating financial/accounting 
systems and procedures with emphasis on audit 
trails and other management controls. 


4.) Designing and using audit check lists unique 
or critical to the command in safeguarding 
resources. 

5.) Review controls and changes for resource 
accountability. 

6.) Participate in reviews of other problem areas. 

7.) Maintain liaison with external audit/inspection 
agencies. 


Sorat ing 
Successful implementation of Internal Review 


requires competent, experienced personnel on a permanent or 
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ad hoc basis, depending on the needs and characteristics of 
the command. Local staffing and training criteria should 
include: 

IIA Me tens cons isting of an dinterdisciplinary 
group with financial management skills and 
the dominant technical skill represented by 
the command. 

2.) The specific staffing requirements should be 
based on the needs and characteristics of the 
command. At present, there are no objective 
criteria provided or available to determine 
what appropriate staffing should be. 

3.) Since Internal Review provides an invaluable 
training ground for development of future 
financial management talent, training should 
include not only auditing but areas of manage- 
ment interest. Training course and materials 
are the responsibility of the Auditor General 
of the Navy. 

d. Audit Process 
The Introduction to Navy Audit and Internal 

Review Text addresses the conduct of an audit as related to 
internal rien Time constraints and staffing will deter- 
mine the scope and type of review conducted, but to some 
extent, every audit process should address the following. 

1.) Audit Planning and Scheduling. Annual plans 
should be made by soliciting audit proposals from the various 
departments of the activity. Proposals should be identified 
as to type of audit required and priorities assigned. Man- 
hour estimates should be made and the plan prepared, with 


any proposals left over kept in a deferred status. The plan 


should be published and distributed to all concerned. 
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Pen conresetce. This is a meeting to 


convince management of the value of the upcoming review and 
to acquire various types of background information, such as 
organization, policies, etc. This corresponds to a segment 
of the Survey Phase of the GAO approach and background in- 
formation of the overview in the private sector. 

3.) Activity/Area Designated for Audit. This is 
defining the audit environment to aid in preparation of the 
audit. This can be characterized as an addition to the Sur- 
vey and overview discussed above. 

4.) Preaudit Survey. The objective of the sur- 
vey is to identify areas requiring close audit examination, 
determine areas that generally appear satisfactory so that 
unnecessary coverage can be avoided, and develop specific 
audit plans and objectives. The auditor is concerned pri- 
marily with evaluating management controls and ways to 
improve them. This corresponds to the preliminary testing 
in the GAO Survey Phase and the study and evaluation of the 
system of internal control and test of effectiveness phases 
in the Private Sector overview. 

5.) Audit Program. Audit programs in this case 
are the same as discussed in the section of internal auditing 
in the Private Sector. They are standardized checklists for 
specific functional areas and are particularly helpful to 
inexperienced auditors but are not substitutes for judgement. 
The Naval Audit Service has developed an extensive list of 


Such programs. 
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6.) On-site Examination. This is the actual con- 
duct of the audit, which corresponds to the GAO Review Phase 
and the Private Sector overview Direct Test Phase. 

7.) Working Papers. Working papers are a con- 
structive, historical record of all parts of the audit per- 
formed and must be complete. 

8.) Findings. Clear, correct, concise, and con- 
meeting findings constitute a significant factor in the success 
of any audit, as noted in the Government Standard of Report- 
ing. Figure 2 is a schematic that succinctly presents the 
key elements. 

Mea e ue l zation. Audit utilization refers 
to the process of insuring that management uses the results 
of the audit. This is accomplished by discussing with manage- 
ment any Significant findings at the time of their discovery, 
as well as a review by the audited organization of the draft 
report. This review is to verify facts supporting the find- 
ings, determine preliminary action taken, if any, and deter- 
Mine planned action and target dates. 

Ad Report. The report is the formal 
record of the audit distributed to local management. In 
addition to the findings, it should include a.) statements of 
concurrence or nonconcurrence by audited management with 
Findings and recommendations, b.) actions taken, c.) actions 
planned with target dates, and d.) when applicable, items of 
dispute, including the position of the department head or a 


statement that an item requires action by higher authority. 
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SECNAVINST 7510.8 requires that all internal review reports 
be submitted to the Commanding Officer via the intermediate 
managers and that an effective followup program is needed. 

e. Internal Review in the Marine Corps -- Differences 

At the present, Marine Corps Order 7540.2, "Inter- 
nal Review," 27 September 1976, is in effect but will soon be 
superceded by Marine Corps Order 7540.2a.>° 

The present Order is concerned with financial 
resources and the financial management responsibilities of 
commanders to insure commitment of resources in accordance 
with prescribed statutory requirements and policies and pro- 
cedures of the Commandant of the Marine Corps. In addition, 
it does not include as many procedures and guidelines. The 
following discussion will be concerned with the new order. 
Changes in requirements will be noted, as will differences 
with previously discussed directives. The new order refer- 
ences SECNAVINST 7510.8, which was published subsequent to 
the issuance of the present Order. 

Internal review will soon include the assessment 
of the use of all command resources; e.g., appropriated funds, 
command property, materials and supplies, which is a change. 
Internal review staffs will provide support to all installa- 
Meomeactivities and organizations, including tenant organiza- 
tions without an internal review staff. Emphasis will be on 
the effectiveness of internal controls and recommendations 


ger the correction of deficiencies, the latter of which is 
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an additional emphasis. Subsequent to corrective action, a 
follow-on review shall be conducted to insure conditions have 
been corrected. The submission of an information copy of 
the annual internal review program to Headquarters has been 
changed to within 45 days of the end of the fiscal year 
WWwé-Wformulation. A copy of command directives, or revisions, 
implementing the new order will be submitted to Headquarters. 

1.) Audit Liaison and Followup. Detailed infor- 
mation is provided concerning matters relating to audits/ 
reviews by agencies external to the command. 

2.) Constructing the Annual Internal Review 
Program. Program development will include revalidated pro- 
jects from the previous period with a high priority, such as 
those revealed by an audit of an agency external to the 
command. Staff and subordinate elements should also recom- 
mend projects, as noted in the Navy Audit Process. Sufficient 
time will be reserved for follow-up reviews to insure correc- 
tive action has been taken. A portion of the manhours avail- 
able will be reserved for urgent unforeseen requirements, not 


to exceed 20 percent of the estimated manhours available (the 


20 percent is a new limitation). The program will include 
as a minimum: a.) requesting staff office and point of 
contact (a new requirement), b.) reason for review, c.) ob- 
gectives and scope of review, d.) summary or checklist of 


procedures, e.) milestones and estimated manhours, and f.) 


previously noted deficiencies. A new requirement is for the 
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comptroller to forward the proposed annual program, with 
recommended priority ranking, to the Commanding Officer for 
approval. (SECNAVINST 7510.8 designates a semiannual review 
and approval by commanders, insofar as practical.) Con- 
sideration should be given to areas outside comptroller 
functions. Also new is an encouragement to forward to Head- 
quarters a copy of completed internal review reports, espe- 
clally those with Marine Corps-wide application. 

3.) Performing the Review. The Preliminary 
Actions prescribed correspond to the Navy Preaudit Survey, 
GAO Survey, and the background and preliminary testing in the 
Private sector overview plus a requirement to evaluate per- 
sonnel available for the review. When needed, the comptrol- 
ler should request augmentation by functional or technical 
personnel within the command. The performance of the review 
corresponds to the review, examination, and direct testing 
previously discussed. Documentation is emphasized, and 
detailed instructions are given for reporting the results in 
a formal manner (a new requirement). The report should in- 
clude a selection of alternatives so the commander has the 
greatest degree of latitude and should be issued no later 
than 30 days after completion of the review. It is the 
responsibility of the comptroller to insure the commander is 
apprised of internal review results. 

4.) R.S. 3679. Detailed information is provided 
regarding administrative control of appropriations (a new 


section). 
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5.) Timekeeping and Civilian Payrolls. Guidance 


is provided regarding the conduct of the review required by 
NAVCOMPT Manual, Volume I, and assigned to internal review 
B MCO 7540.1. 

The staffing of internal review will be from 
within available manpower authorizations and funding. A 
report will be made to Headquarters, with the annual internal 
review program, providing the rank/grade and military occupa- 
tional specialty/series of authorized and assigned positions 
in internal review. At the present time no criteria have 
been established to determine staffing requirements; rather, 
staffing is determined at present by the workload planned and 
performed by the internal review Betr 

Internal auditing is stressed in DOD, and internal 
review is "mentioned." In the Department of the Navy, inter- 
nal auditing has been continually emphasized. Internal Re- 
view is now emphasized, though only recently. The growth of 
Internal Review has been the result of an effort to provide 
commanders with an increased review capability over that 
provided by the Naval Audit Service every 3 to 5 years, depend- 


ing on the ence 
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A ESO TUDY -=- MCAS 


TAE AIR STATION 

The Marine Corps Air Station (MCAS) supports both tenant 
and transient aviation units and detachments. In addition to 
the 5 tenant aviation units, the MCAS provided support for 
34 rotational units with 552 aircraft and 7,574 personnel 
during the last fiscal year. An additional 16,704 transient 
aircrewmen stopped at the MCAS for services. 

The Fiscal Year 1979 budget for the MCAS totalled over 
mem lion, including just over $11 million for Station 
Operation and Maintenance, Marine Corps, funds. The com- 
manders of scheduled rotational units are expected to provide 
around $5 million for anticipated alrcraft maintenance support. 


(See Table I) 


B., INTERNAL REVIEW 

Internal Review was established in June 1976 as a train- 
ing billet. That is, an Auditor Trainee, GS-510-05, was 
hired and entered a 24-month training program. Subject to 
evaluation at 6-month intervals, the trainee was scheduled 
to advance to GS-07 at the end of 12 months and subsequently 
to GS-09 after 24 months. Training was to be on the job and 
guided by the Deputy Controller. 

ime Organization 

The Internal Review function at the MCAS has been 


Organized as a division of the Comptroller Department, as 
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Table I 


MCAS Budget Distribution 
FY 1979 


EXT 79 
AUTHORIZATION 


Operation & Maintenance, Marine Corps Sie G9. 53 0 


Family Housing Defense 2 64 269 

Total Other Reimbursements* Soeur, S02 
Grand Total Expense Operating Budget $19,424,601 
Total Miscellaneous Allotments 881,408 

Marine Corps Stock Fund Se e ra 

Marine Corps Trust Funds 3350 

Ey Stock Fund 24,349,294 
Total All Funds 27,805,644 
Overall Grand Total Saale 53 


maes $5 million for maintenance support of rotational 
units. 


ee: MCAS FY 1979 Budget 
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shown in Figure 3. The job description includes the conduct 
.of periodic and special efforts to evaluate the effectiveness 
of the Station financial management systems, as well as all 
phases of their installation. It also specifies responsibil- 
ity to review accounting procedures, recommendations on or- 
qunlization and staffing in the Comptroller's Office, the 
Maintenance of funds allocated to the Comptroller's Office, 
plus liaison duties with external agencies. An additional 
duty to select and prepare Cost Reduction submissions is also 
assigned. No official local directive assigning responsibil- 
ities to Internal Review has been published, but letters of 
appointment are drafted for such functions as the audit of 
funds issued to Imprest Fund Cashiers. The Audit Verifica- 
tion Board, composed of one officer and the Ne member of 
internal review, was established for such audits as the cash 
Berne in Disbursing and audit of subfunds. 

Bee Staffing 

The first trainee to hold the internal review position 

left the job after about a year for other employment. His 
replacement holds the position today as a GS-09. Before 
coming to this job, the incumbent worked for 18-1/2 years as 
an internal auditor for General Electric. He has an account- 
ing degree and has expressed an eagerness to pursue every 
Opportunity to increase his effectiveness. The Internal 
Review Division has a recognized requirement of two personnel 


but to date has only one person assigned. (See Appendix D.) 
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Appendix R is the training plan established to ful- 
fill the training program previously discussed. The training 
is financial management oriented. It covers Accounting Divi- 
sion operations, budgeting at the cost center and station 
levels, Comptroller Department operations, including the 
financial section of the Public Works Department, Cost Center 
management, and Supply operations. Evaluations are provided 
at six-month intervals and sent to the Comptroller. In addi- 
zen to completion of the training program, the incumbent 
spent six weeks in 1977 with an audit team of the Naval Audit 
Service, learning audit routines. 

DET. Program 

An annual Internal Review Program is required by 
MCO 7540.2. Appendix C is the MCAS report on the Fiscal 
Year 1979 Program. It has been constructed to comply with 
MCO 7540.2 and with the guidance provided by DODINST 7600.3 
to avoid the duplication of the internal audit functions. 

The Program was constructed by first identifying reviews 
required by higher authority, such as audit of Imprest Funds. 
Then projects proposed by the various departments in the 
activity were added. A reserve of manhours was scheduled 

for unforeseen problems ("troubleshooting" capability). 

A large portion of the reviews scheduled and per- 
formed are the fiduciary type. Appendix D is the report of 
reviews for the first six months of Fiscal Year 1979. The 


remaining reviews are concerned primarily with financial 
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management issues, both those performed and scheduled. Dur- 
ing an approximate two-month period this past budget cycle, 
the internal review incumbent spent most of his time assist- 
ing in the zero base budget construction. This provided 
training for him and filled a manpower need in budgeting. The 
"As Assigned/Required" part of the scheduled program absorbed 
the loss of manhours. The "troubleshooting" assignments that 
have been performed include an investigation concerning the 
difficulty in obtaining cable for the runway arresting gear. 
This represents an immediate response capability for the 
commander to changing conditions. 

4. Approach to the Conduct of a Review 

As discussed in the previous section, the areas for 
reviews to be conducted are established by the Commanding 
Officer, requests from departments, or as directed by higher 
authority. These reviews have historicallv been almost 
exclusively financial management or fiduciary oriented. 

The first step in a typical review is the research of 
pertinent directives to determine what checks of compliance 
need to be made. A list of points to check is made to use 
in the same way an audit program is used for audits of the 
Civilian payroll. Then, personnel who are part of the area 
being reviewed are interviewed and observed. Specific points 
of compliance are noted, as are additional problems that 
arise. 

When the review covers an area with detailed doc- 


umentation, such as vouchers, a system is devised to test the 
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transactions. For areas that involve only a few items, such 
as about 40, a census is made. The approach for areas with 
a large number of transactions, however, involves sampling 
about 20 to 25 percent of the population, depending on the 
reviewer's Judgement. A typical procedure would be to inspect 
every fourth document. When a discrepancy is noted, a larger 
sample or census is taken. As an example, during a recent 
verification of cash held in Disbursing, a several hundred 
dollar shortage was discovered, and every document processed 
by the section for the period of time since the last verifica- 
tion was traced through the system. The case is still under 
Pasta gation by authorities. Such verifications of cash 
balances are done on an unscheduled basis to improve the 
representativeness of the count. The Internal Review in- 
cumbent has been involved in the actual counting of cash. 

The majority of the reviews now conducted concern 
the computer reports generated by the automated accounting 
system for appropriated funds. Since the automated system 
has been installed, control over obligated funds has been 
improved. However, there has been a continuing problem of 
differences in the records of the requisitioning activity, 
supply, and accounting. In addition to the normal document 
flow, the use of telauto-writer equipment has further ag- 
gravated the problem, because quite often the originator 
receives notice of a cancellation but the accounting section 


does not. This presents a significant problem at the end 
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of the fiscal year. For these reasons, Internal Review 
spends a considerable amount of time researching such prob- 
lems. Appendix E is the report for just such a review. The 
results show that efforts during the review were directed at 
obtaining a status of funds with recommendations concerning 
future actions regarding the status of funds. Another recent 
review resulted in clearing over $l million from the books, 
providing a significant reduction in the amount of associated 
paperwork. One of the major problems concerning the differen- 
tial in records of various departments, which was not explic- 
itly identified in the report, is the problem of personnel 
turnover at the document-generating level of the various 
departments. This situation requires a constant retraining 
process that is accompanied with associated errors. This 
problem has been addressed by numerous meetings of management 
to attempt to produce a solution. 

Another type of review that is common is the conduct 
of research to determine the effect of changes in codes used 
to account for funds. This information is then used to 
reconcile the department's records with those of accounting. 
Here again, personnel turnover appears as a problem in terms 
of knowledge and experience. 

The reporting of the results of the internal reviews 
performed is primarily on an informal basis. Affected 
management is briefed with the information produced by the 
review. The Comptroller is made aware of the results as 


well, and the Comptroller determines whether the results are 
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sino icant enough to brief to the Commanding Officer. Due 
to the shortage of administrative support available, the 
written reports are usually in memorandum form addressed to 
the Commanding Officer and delivered to the Comptroller. The 
review report in Appendix E reflects the types of reviews 
that have been discussed. The information, as previously 
mentioned, is primarily the current status of funds with some 
discussion of problems in a general context. Several alter- 
natives are presented to provide the Commanding Officer with 
latitude in the decisions that are required. 

The followup procedure for reviews is informal. That 
is, if the problems identified in the review occur again, 
Internal Review makes note of it by comparison with records 
within Internal Review. Liaison is then made to determine 
why. 

Service to management is the philosophy of MCAS'S 
Internal Review. If the status of funds is known, decisions 
regarding items with significant financial impact can be 
made with a better anticipation of the effect on the budget. 
Control over tne budget in turn will allow management to 
concentrate on performing the assigned mission. 

The next chapter will concentrate on the following points 
to reinforce Internal Review's capability to provide service 
tO management: 


l. Policy changes required to provide the Internal 
Review capability required by management. 


2. Emphasis on command support for Internal Review 


in terms of independence, staffing, and an im- 
plementing directive. 
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3. Need to formalize the planning, reporting, and 
followup procedures. 


4. Requirement to expand the scope of Internal Re- 


view and include the requirement to meet GAO 
Standards whenever possible. 
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V. CONCLUSIONS AND RECOMMENDATIONS 


Pee OLICY FOR INTERNAL REVIEW 

The GAO views internal review for government agencies 
as an independent review, such as internal audit, of all 
elements of internal control. It not only should review 
internal control but should also be an element of the inter- 
nal control system. As such, it should be evaluated by an 
external audit agency to determine its reliability. 

The DOD conception of internal review is somewhat more 
restrictive. At present, the precise definition, intent, 
and methodology of internal review in the DOD is uncertain. 
From the DOD perspective discussed in Chapter III, it appears 
that centralized control is a major consideration of any 
internal audit function as stated in DODINST 7600.3 and the 
report by the DOD Joint Study Group. Concerning internal 
review, the report of the Study Group contains the statement 
that most internal reviews examined did not meet GAO audit 
standards and thus were deficient. The statement that inter- 
nal reviews should meet audit standards implies professional 
audit capability should be maintained at every field activity. 
The important point is that a quality review staff should be 
feme@eained for a very limited function; e.g., "trouble- 
shooting." As also discussed in Chapter III, it is interest- 
ing to note that the agency that met DOD guidance regarding 


the care in avoidance of duplication of internal audit 
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functions did not produce quality results. On the other 
hand, the agency that duplicated such functions produced a 
much higher proportion of reviews conducted at acceptable 
levels of performance. ° 

In SECNAVINST 7510.8, the Department of the Navy has been 
more specific in its definition of and guidance for internal 
review. It is to be a special capability, including audit, 
that does not INTENTIONALLY duplicate internal audit func- 
tions. Reviews that are conducted, however, should produce 
reviews of such quality that external auditors can reduce 
to a minimum the number of duplicative reviews that have to 
be made. The soon-to-be promulgated MCO 7540.2A emphasizes 
review of internal controls and providing corrective recom- 
mendations. 

If a commander is to maintain a review capability that 
will improve both the effectiveness and efficiency of mis- 
sion performance, it seems apparent that it should be more 
than just a limited "troubleshooting" ability as it appears 
that the DOD Instruction prescribes. The SECNAV Instruction 
and MCO establish a more comprehensive capability. However, 
emet the latter instructions require that funding of this 
capability must be made available from available resources. 
This places the burden of funding on the local commander, 
who must take a reduction in another area to fund Internal 
Review. This raises the question of the value of Internal 


Review. How much is enough, and how much should Internal 
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Review cost? Since no guidance is provided, those difficult 
questions now have to be answered at the operating level and 


have resulted in staffing problens. 


EPEC ASE STUDY 

Since the Department of the Navy approach to internal 
review offers a better tool for a Commanding Officer to 
review his command, this approach will be used when consider- 
ing the case. 

Internal Review at the MCAS complies with the intent of 
MCO 7540.2. The reviews performed primarily pertain directly 
to the financial resources and financial management responsi- 
bilities of the Commander. The following will discuss the 
effect of the new MCO 7540.2A and SECNAVINST 7510.8. 

At present, the reviews conducted concern financial 
resources or fiduciary responsibilities. When MCO 7540.2A 
becomes effective, the emphasis of internal review will 
include the efficient and economical use of all command 
resources, as does SECNAVINST 7510.8. Both of these direc- 
tives include the formulation of recommendations to correct 
the conditions that have an adverse impact. The recommenda- 
tions provided in Appendix E relate to the status of funds, 
not to the correction of the conditions that caused the 
problems. 

i Organization 

Internal review at the MCAS is implemented under the 


Comptroller as required by both directives. However, both 
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EB etives provide for obtaining functional or technical per- 
sonnel from within the Command to augment the nucleus of 
Internal Review. At present, the MCAS uses only the incun- 
bent, except for fiduciary audits when one officer is used. 
Internal Review is placed under the Comptroller, which limits 
the independence of the Interal Review function. The Comptrol- 
ler administers the Internal Review Program and filters all 
reports produced. Since most all of the reports are informal, 
the Comptroller decides what results the Commanding Officer 
should recelve. 
De Staffing 

The experience level and training of the incumbent 
is impressive. The training program has included the elements 
ilpedoned in SECNAVINST 7510.8 for training for financial 
management, but should also provide for the expanded concern 
for efficiency and effectiveness. The staffing level at 
present is based on the limited scope of internal review as 
provided in the current MCO. Even so, if the incumbent were 
to leave, Internal Review, under present arrangements, would 
begin all over with a GS-05 under training. Also, if the 
more comprehensive Internal Review is to be implemented, it 
does not appear that one person will be able to cover all 
requirements since the incumbent has a full schedule with 
the present limited scope. 

3. Program 
The new MCO will require a more formalized approach 


mememe construction of the annual program. The contents of 
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the report to CMC will be expanded, and the role of the field 
activity Commander in the decision making process of program 
content will include evaluation of projects with assigned 
priorities. Emphasis in both the MCO and SECNAVINST includes 
the examination of the system of internal control for concept 
and application, which will have an effect on the projects 
planned. The new limitation of 20 percent by the new MCO on 
the amount of reserve manhours should have little effect at 
the MCAS since currently only 23 percent is scheduled. 

4. Approach to the Conduct of a Review 

Internal reviews performed to date have had a specific 
purpose in mind; e.g., Status of funds or effect of system 
reporting on funds. The SECNAVINST and MCO require a more 
comprehensive approach. The SECNAVINST provides guidance 
that reviews should be independent, thorough, professional, 
and detailed so that duplicative external reviews by external 
auditors can be minimized. To accomplish this, internal 
reviews have to meet the GAO Standards for internal audit. 

The reviews conducted have followed the general audit pro- 
cess but were not intended to be as inclusive as that required 
to meet such standards. 

Some examples of the differences that will be required 
are the objectives of some types of reviews and the sampling 
methods used. The status of funds is obviously important, 
but if there is a continuing problem as in the MCAS auto- 
mated reporting system, reviews should include attempts to 


isolate the problems and provide recommendations regarding 
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the correction of the problems. As for sampling, judgement 
samples are appropriate but should be based on some criteria 
other than every fourth document, the latter of which may be 
appropriate for a limited-objective review. 

Additional changes that will be required are the 
changing of both the reporting and followup procedures from 
informal to formal. It should be recognized that as a 
system becomes more formal (such as the program, reporting, 


and followup), more administrative support will be required. 


C. RECOMMENDATIONS 
ime Policy 

a. The apparent differences in the concept of inter- 
nal review at the DOD and Department of the Navy levels must 
be resolved if internal review is to produce the quality of 
work desired by the DOD Study Group and by the Navy to reduce 
duplicative audits. 

b. In addition, provisions must be made at the 
agency level for the resources that will be required in the 
actual implementation of internal review as a functional 
component of the system of internal control. Resources must 
be used to protect and insure the effective, efficient use 
of a much greater amount of resources. 

C. In addition, staffing criteria must be established 
in terms of numbers of personnel and skills required. The 
present method of judging the personnel required to execute 
the programs currently in effect will not produce quality 


Internal Review. 
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d. Long range programs need to be developed to 
assist field activities in developing Internal Review Pro- 
grams. Such programs would insure all appropriate areas are 
scheduled for review and would provide justification for the 
resources required at the operating level. 

2. Case Study 

a. In order to make internal review effective as 
part of the system of internal control, the Commanding Offi- 
cer must be convinced of its value and effectiveness by 
being closely involved with the growth of the program. The 
program should be specially tailored to the needs of the com- 
mand based on the mission to be performed and known or sus- 
pected critical areas of concern. 

b. A directive should be initiated, similar in 
function to the formal written document in the Private Sector, 
establishing the independence, purpose, authority, and 
responsibility of internal review in implementing the provi- 
SONS Of MCO 7540.2A (a copy of which is required to be for- 
warded to CMC). 

c. Even though both the SECNAVINST and MCO require 
that Internal Review be established under the Comptroller, a 
requirement for formal reporting to the Commanding Officer 
and regular briefing by Internal Review will improve the 
INDEPENDENCE of the Division, which is required by GAO 
Standards, and will also demonstrate command support. 

d. The Head of Internal Review should have the 


ability to draw knowledgeable, experienced personnel from 
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the functional/technical areas under review. This will pro- 
vide the manpower to perform routine as Suehsassesunting 
cash, so the Head of Internal Review, a GS-09, can spend his 
time in more productive work, such as evaluating the concept 
and application of the system of internal control. Also, 
personnel with a recuired skill or expertise should be avail- 
able for reviews that require a skill not possessed by 
Internal Review. 

e. The activities of Internal Review personnel should 
be concentrated on those relating directly to the established 
command Internal Review Program. Activities outside the 
Program, such as augmenting personnel in other Comptroller 
Department sections due to personnel requirements, should be 
done only on an emergency basis. 

f. The annual program should be constructed to re- 
flect the widened scope of internal review, including the 
elements required by MCO 7540.2A. Deviations from the ap- 
proved plan should be approved by the Commanding Officer and 
progress against the plan should be monitored, updated on a 
quarterly basis, and reported. 

g. Whenever possible and appropriate, reviews should 
be conducted to meet the GAO Standards. This will not only 
reduce the duplicative audits required but will produce the 
desired results of detecting problems, providing recommenda- 
tions to prevent their recurrence, and followup to insure it. 

h. Formal reporting and followup procedures should 


Benstituted. SECNAVINST 7510.8, MCO 7540.2A, and the 
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Nro ductron to Navy Audit and Internal Review Text contain 
required and useful information for successful reporting and 
followup. Included are recommendations for correction of 
conditions that result in problems, such as the continuing 
problems of unfilled orders and personnel turnover. In addi- 
tion, reports should attempt to establish a cost-benefit 
relationship of what the review cost and the quantitative and 
qualitative value of the findings. This will provide an 
indicator of value and performance, as well as establish a 
basis for staffing. 

i. Institute training for personnel in other depart- 
ments on key findings that are applicable so problem areas 
Game Dbe highlighted. 

j. Training for Internal Review should include 
subjects related to reviews for effectiveness and efficiency 
in addition to the financial and fiduciary elements presently 
in the training plan. The Comptroller of the Navy offers an 
auditing short course that would be appropriate. 

Regardless of the programs or procedures implemented, the 
success of any system depends on command support at all levels. 
If Internal Review is to be successful, such support must be 


available in a tangible form and on a continuing basis. 
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APPENDIX A 


MEENA ERRENTEN DEPARTMENT OF DEFENSE 


SECNAVINST 7510.7A 
Zee DEC 1978 


d. Internal Review at Lower Echelons. Manage- 
ment at lower echelons is not precluded from 
establishing groups which, while not perform- 
ing independent or comprehensive audits, 
would serve as "trouble shooters" who may 
make special analyses in comptroller and 
other areas and assist in correcting defici- 
encies which are revealed by audits, reports, 
analyses, observations or other means. In 
authorizing such internal review activities 
at any echelon, care should be exercised to 
assure avoidance of duplication of internal 
audit functions as defined below which are 
assigned to the centralized audit organiza- 
Elo mers 


meee LNT ERNAL AUDIT RESPONSIBILITIES, MISSION AND SCOPE 


A. 


The purpose of internal audit is to lead to action 
which will improve the operations of the Department 
of Defense. It is the independent review and eval- 
uation of the effectiveness and efficiency with which 
managerial responsibilities are being carried out. 
It iS an independent appraisal activity for the re- 
view of financial, operational, and support activi- 
ties as a basis for protective and constructive ser- 
vice to management. Internal audit review and ap- 
praisal covers functions, organizations, systens, 
procedures, practices and transactions, records and 
documentation of all kinds. It is directed toward 
determining that management controls, practices and 
procedures at all levels are adequate in concept and 
effective in application and that they provide for 
adequate financial integrity and effective utiliza- 
tion of resources available. It is a managerial 
control which functions by measuring and evaluating 
effectiveness of other controls. 


SwWomeceestO tie authority, direction, and control of 
their superiors, the heads of Defense internal audit 
organizations will develop and execute plans, poli- 
cies, procedures, and programs necessary to dis- 
charge internal audit responsibilities. 
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SECNAVINST 7510. 7A 
28 December 1973 


7600.3 
Janad; 7/4 


To accomplish the overall objective of assisting 
management at all levels in achieving efficient and 
effective administration, audit activities of Defense 
audit organizations will include the following: 


l. Reviewing and appraising the soundness, adequacy 
amara splication or accounting, financial and 
operating controls. 


2. Examining and appraising the adequacy and effec- 
tiveness of policies, systems, procedures, 
records, and reports relating to programming, 
budgeting, acGeumting, procurement, supply, 
financial or business transactions of all kinds, 
and other operations having an impact on the 
expenditure of funds, utilization of resources, 
or accomplishment of management objectives. 


3. Appraising performance under, and ascertaining 
the extent of compliance with, established poli- 
cies, procedures, regulations, laws, etc. 


4. Ascertaining whether resources (funds, personnel, 
material and other property) are properly justi- 
fied, utilized, accounted for, disposed of, and 
safeguarded from loss. 


5. Ascertalning the reliability of accounting and 
other data and reports developed within the DoD 
Components and the need for, timeliness, and 
usefulness thereof. 


6. Disclosing inefficiency, waste and other improper 
conditions and practices. 


7. Reporting the facts ascertained and making recom- 
mentations in connection therewith to appropriate 
levels of management. 


Internal audit is a staff function which, to operate 
effectively, must be completely independent of line 
operations. The internal auditor's responsibility 
is to examine, observe, review, and evaluate the 
policies, systems, and procedures, and the perform- 
ance thereunder, respecting all aspects of manage- 
ment for the purpose of reporting findings and mak- 
ing recommendations for corrective action to manage- 
ment. The existence of an internal audit staff in 
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SECNAVINST 7510.8A 
28 December 1978 


7600.3 
wan 4, 


74 


no way relieves other personnel of duties and res- 
ponsibilities assigned to them. Full responsibility 
is vested in the DoD Components and the various com- 
mands therein for proper management; for protection 
and use of assets under their control; for compliance 
with directives from higher authority; and for the 
desse Propri rety, legality, and reliability of 
their actions. 


While the scope of internal audit responsiblity is 
broad, it does not include criticism of management 
decisions based upon after-the-fact substitution of 
the auditor's judgment for that of responsible man- 
agement. Most management decisions involve risk and 
uncertainty. Thus, the fact that later events prove 
the decision to be wrong is not, taken by itself, a 
subject for audit reporting. It becomes a subject, 
however, when the decision indicates inefficient 
operations, inadequate procedures, or other defici- 
encies, the reporting of which would lead to future 
improvements in systems or procedures, or avoidance 
Giveuerers. The following are illustrative: 


1. Erroneous decisions made on the basis of in- 
correct or incomplete data because of deficien- 
cies in the information system. 


2. Erroneous decisions arising from failure to con- 
Sider data which were readily available at the 
time the decision was made. 


3. Decisions resulting in actions which were con- 
trary to law, policy or regulations. 


The internal auditor does not have the authority to 
make changes, nor to order changes made, in the pro- 
cedures or operations of the activities audited. 

The internal auditor is not responsible for develop- 
ing systems, methods and procedures, nor for the 
performance of duties constituting a part of regular 
line operations. Such responsibilities would tend 
to give him a biased viewpoint when, in the course 
of his audits, he would be required to appraise his 
own work. However, the auditor may call attention 
to problem areas with respect to any of these mat- 
ters and provide advisory assistance to system 
development personnel particularly with respect to 
such aspects of internal controls and audit trails. 
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SECNAVINST 7510.72 
28 December 1978 


7600.3 
Jan 4, 74 


The auditor, based upon his independent examinations, 
reviews, and appraisals, provides an advisory service 
and makes recommendations to management for improve- 
ments and for the correction of deficiencies. It is 
the responsibility of management to determine what 
action will be taken and to give the required correc- 
tive orders. This, however, does not relieve the 
EWwessrsstätr er the responsibility for following up 

on recommendations to determine whether they were 
given adequate consideration and that management's 
orders to accomplish changes and correct deficiencies 
were effectuated. 
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APPENDIX B 
TRAINING PLAN 
I TITLE - Auditor, GS-09 


Position - Head, Internal Review Division, Comptroller 
Department. 


mi., LENGTH OF TRAINING PERIOD 


Em Error Tr ammeer2Ge-05 - Erom hire date for 1 calendar 
year depending on progress, qualifications and supervisor's 
recommendation. 


Advanced Trainee, GS-07 - From promotion date to GS-07 
for 1 calendar year. 


AMR OBJECTIVES. To train the incumbent from the grade of 
ESOS. to fulfili the Auditor position within the command. 

By college education, graduate education and on-the-job 
training the trainee will be able to apply standard audit 
procedures and install audit programs by obtaining a good 
working knowledge of accounting, budgeting, financial reports, 
data processing and systems theory and practice. 


IV. TYPE TRAINING 
A. On-the-job Training - GS-05 


1. Accounting Division. Trainee will work in the 
Accounting Division for the first four months. Under super- 
vision of the Accounting Officer, the trainee will progress 
through all phases of Funds Resource Branch, Stores Branch, 
eee Accounting Branch, Civilian Payroll Branch, and Plant 
Property. While learning the basic systems the trainee will 
perform routine audit assignments; examine routine account- 
ing documents to verify the accuracy of computations and 
ascertain that transactions tested are properly recorded and 
supported and are in accordance with pertinent laws and 
regulations. Trainee will perform studies and analyze exist- 
ing data processing systems and directives for a three month 
period. Trainee will become familiar with data processing 
theory and systems theory. Liaison visits to Camp 
and/or COMCAB will be made to understand Data Process- 
ing organization. 


2. Budgeting Division. Trainee will work in the 
w eting Division for a three month period, and will parti- 
cipate in the budgeting process from the Cost Center level 
to finalization at station level. Midyear review procedures 
will be understood and all budgetary reports will be reviewed 
wn understanding of content. 
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3. On an aS assigned basis, trainee will perform 
verification of inventories, tracing prices to invoices or 
price lists, counting cash, testing the aging of receivables 
and payables, listing balances of ledger accounts, preparing 
detailed statements and schedules for reports, and prepare 
Simple reconciliations. 


4. Comptroller Office. Work under the direction 
of the Deputy Comptroller to understand overall general fin- 
ancial budgetary and management policy. 


Pron che- job Training GS-7. 


l. Work under the direction of the Deputy Comptrol- 
ler to strengthen the understanding of the various divisions 
of the Comptroller Department. Serves as an Internal Review 
Auditor Trainee performing a wide range of audit assignments 
to prepare trainee to perform more difficult tasks. Trainee 
will be assigned audit duties to include cost centers, all 
branches of accounting, budget division, and other areas as 
directed. Analysis of data processing systems will be made 
with the intention of developing new or revised methods to 
change or supplement automated requirements. Spend at least 
two months working in areas of Supply to better understand 
the Financial/Supply interface. Spend at least one month 
in the Public Works Department financial section. 


C. Special Projects or Assignments. 


l. Cost Center Management. Perform an in-depth 
study of the Cost Centers to include: 


a. Financial Management. 
b. Budgetary Requirements. 
c. Cost Center-Supply System Interface. 


2. Comptroller Department organization. Trainee 
will perform an in-depth study of how the Comptroller Depart- 
ment is organized, why, and how it compares to U. S. Marine 
Corps standards. All directives from higher authorities 
will be analyzed and an organizational manual, along with 
detailed instructions prepared to reorganize the department 
or substantiate current organization. 


D. Rotational Assignments. Covered in on-the-job 
training. All areas in the Comptroller's Department, Cost 
Centers, Public Works, and Supply. 


E. Self-Development. Participate in available pro- 
fessional societies and the below reading program: 
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NAVCOMPT Manual Vol. 7 

DOD 7045.1 Programming System 

DOD 7040.5 Definition of Expenses and Investment 

Costs 

DOD 7045.7 Review and Approval of Changes to FYDP 

DOD 7110-1-M-DOD Budget Guidance Manual 

Financial Management of Resources (Departmental and 
Field Activities) NAVSO P-3006 


F. Persons responsible for implementing and coordinat- 
sig training plan: 


Deputy Comptroller 
V. EVALUATION 


A. Trainee Evaluation. A comprehensive written report 
of his total training experience will be required of the 
trainee at 6-month intervals while in training and upon com- 
WiéWé-EeXon of the total training period. Format similar to en- 
closure (1) will be used to make this evaluation. 


B. Supervisory Evaluation. The trainee's progress 
will be continually evaluated throughout the program by the 
Program Coordinator. Quarterly reports will be submitted 
we ormat similar to enclosure (2), to the Comptroller, 
which evaluates the trainee's overall progress, demonstrated 
Bey to apply the subject matter of the training to in- 
dividual needs, and/or need to revise the program. If the 
Program Coordinator should determine at any time during the 
course of the training program that the trainee is not meet- 
ing the general standards as set forth in the training plan, 
an additional report shall be submitted to the Comptroller 
recommending appropriate action. When the Program Coordina- 
tor determines that the trainee has satisfactorily completed 
the objectives and requirements of the training program, she 
will certify that the requirements of the approved plan have 
been fulfilled and that the trainee is satisfactorily per- 
memming the duties at the respective level. This certifica- 
tion, along with the trainee's report and other supporting 
documents, will be submitted to the Comptroller. 


VARA CERTIFICATION. The Comptroller will review the evalua- 
tion reports and forward these reports with appropriate 
recommendations to the Civilian Personnel Officer. At com- 
pletion of the training program for each level, and when 

the incumbent is certified or qualified by the Civilian Per- 
sonnel Officer, incumbent will be promoted accordingly. 
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APPENDIX C 
FY1979 INTERNAL REVIEW PROGRAM 


Monthly Requirements 28 Man Days 


de 


b. Reports: Verify the accuracy of the monthly Com- 
missary Store Report and the Flying Hour 
Cost Report. 
Quarterly Requirements 13 Man Days 
a. Audits: Audit cash/vouchers held as cash and other 
assets as recorded in the Disbursing Offi- 
cer's official cash book. 
b. Reports: Verify the accuracy of the Banking Facility 
REDOr C: 
Annual Requirements 45 Man Days 
a. Audits: Civilian Payroll and Timekeeping procedures. 
b. Reports: Preparation of the Internal Review Program 
Report. 
Prepare/Review Commercial/Industrial 
Activities Inventory Report. 
Bi-Annual Requirements 45 Man Days 
a. Audits: Special Deposit Accounts established with 
the Disbursing Officer by private parties. 
Verify accuracy and ensure proper proced- 
ures are being used by Fund Administrators 
in maintenance of Memorandum Accounting 
Records tor Tünd control. Also, ensure 
proper utilization of funds. 
As Assigned/Required 60 Man Days 
a. Follow-up on own previous audits to ensure correc- 
tive action(s) are being taken and approved recom- 
mendations have been implemented. 
b. Coordinate, assemble, forward to CMC, and follow-up 
on audits by outside agencies. 
c. Review and submit recommendations concerning local 
directives. 
d. Conduct audits of unforeseen problems on an "as 
required" basis. 
mica lning 49 Man Days 
dei training of an Accountant-Auditor GS-510 - 


Audits: Funds issued to Imprest Fund cashiers, 
collection agents and custodians. 


5/7/9 in all areas of financial management in the 
Department of the Navy and Marine Corps so that 
Journeyman level can be reached in two years. 
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FY1979 INTERNAL REVIEW PROGRAM (Continued) 


7. Leave 20 Man Days 
a. Earned Annual Leave. 
8. Total Man Days Scheduled 260 Man Days 
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FEED 


BERGEN ZOFTZOPERATTONS OF INTERNAL REVIEW 


meee LVITY: MCAS, PERIOD: oee SEO oJ) Mar 19 


le. 


Personnel Authorized as of End of Reporting Period NUMBER 
Professional 


Civilian l1 (Trainee) 
Military 30; 
Sub= total 1 
Administrative 
Civilian -0- 
Military 05 
Sub-total -0- 
TOTAL l 


eating Costs Incurred During Reporting Period AMOUNT 


Civilian Personnel Sane O4 
Military Personnel -0- 
Travel 850 
Other 30 
TOTAL 58,104 
Workload Data Applicable to Reportina Period NUMBER OF 
PERSONNEL 


a. Recognized Requirement as of end of period 2 
b. Assigned as of end of period il 
em Shortfall l 


Operational Highlights 


Operations during this reporting period included: 


dei uovo procedures utilized in collecting and controlling 
cash funds. 


b. Study of the interface between Supply/Accounting Fund 
Administrators. 


C. Two off-station training courses. 


Reports Issued and Resources Applied During Reporting Period 


No formal reports issued during reporting period. 


Significant Findings of Waste 


None. 


Potential Fraud Cases Referred to Investigative Organizations 
during Reporting Period 


None. 


- 86 





APPENDIX E 
IN BPERNAT REV LEWeREPORT 


From: Internal Review 

To: Commanding Officer 

Via: Comptroller 

SW): Review of Funds Status as of 23 August 1979 - S-3 Fund 


Administrator Codes D2, El and E3 


bg: To ascertain Memo Record balances in an attempt to present 
overexpenditure of FY79 funds allocated to the S-3 activity. 

l. Balances at the end of the first quarter were not carried forward 

to the second quarter. Correction was made at the time of the review 

by the Fund Administrator. 

2. A verbal decrease of authorization was shown in the second quarter. 

However, the third quarter authorization reflected the decrease. The 

record was adjusted in the course of the review by the Fund Administra- 

Por. 

3. After the above adjustments were recorded, the following balances 


as of 23 August appear in the Memo Record: 


Structural Fire Department (D2) Sec ole 
Air Field Operations (El) Podi: 
Crash and Rescue (E3) TES 


4. It was determined that the Unfilled Requisition Report of 31 July 
fiero lists a total of 47 documents which have either been cancelled 


or completed per S-3 records. Following is a breakdown by fund code: 


NOT OE 

Documents Amount 
Structural Fire Department (D2) 6 Ss 1,257. 1] 
Air Field Operations (El) 15 17203-48 
Crash and Rescue (E3) 26 117787299 


Total 47 $14,248.14 


These documents have been called to the attention of the accounting 
Beery ity . 

5. Following is an aging of the above mentioned documents from date 
of initiation to cancellation or completion and from julian date of 


document to julian date of the UR Report. 
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leone 37 To 60 61 to 90 91 to 180 Over 180 


Days Days Days Days Days Days 
Completed/Cancelled 21 17 7 O 2 O 
Age per UR Report T IS 6 6 12 9 


6. The timeliness of paper flow between the initiating activity, Supply, 
Data Processing and Accounting activities is less than desirable. How- 
ever, the type of material ordered, priority, whether it is a direct 
turnover item, a supply system item, a procurement or a contract item 
makes a vast difference in the timeliness of the paper flow. Procure- 
ment items requiring a competitive bid, or a cost estimate may take 
several months between the initiation of the document and the completion 
of the document. Therefore, it is nearly impossible to determine the 
time lag in processing a requisition/document from start to finish. 

7. It appears that the present fund balance on hand 23 August 1979 is 
insufficient to cover normal operations in the D2 activity. 

8. Following is a reconcilement of Memo Record balances to the mech- 


anized report balances: 


D2 El _E3 

Mechanized balances (424.00) >s7.120.08 S44) 702.00 
Memo Record balance SAT S55, 94723. SEO] 
FY Documents in FY79 mech. 

reports (802.98) -0- -0- 
UR's -0- 500236 DS 12 
Documents not on mechanized report -0- a Aa LL 317-87 
Price Variances 147.85 (72.38) 39 2217528 


$ (424.00) 2120:00 $44,702.00 


The FY78 documents above have been reported to the accounting activity 
Eersceorrecetion of entry. Each transaction was completed prior to 


16 August 1978 and therefore belong in FY78 business. 
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APPENDIX F 


GLOSSARY OF TERMS 


AUDIT TRAIL -- Accumulation of source documents and records 
which are the support of transactions that occurred during 
the period under audit. 


ETESEAN STATISTICS -- A method of computing the probability 
of a state of nature and modification of the probability by 
uSing information gathered from an experiment. 


CONFIDENCE LEVEL -- Refers to the extent the auditor connects 
the statistical term with the auditor's subjective confidence 
INS UPport of a proposition. 


GENERALLY ACCEPTED ACCOUNTING PRINCIPLES -- Principles used 
to evaluate financial accounting information -- they are 
established by authoritative bodies, such as the Financial 
Accounting Standards Board and the Securities and Exchange 
Commission, or by long usage in practice. 


JUDGEMENT SAMPLE -- A sample where the size of the sample 
and individual items in the sample are chosen on the basis 
of sound reasoning by the auditor. 


REPRESENTATIVE SAMPLE -- A sample that possesses the same 
characteristics and in the same proportion as the population. 


TELAUTOWRITER EQUIPMENT -- Equipment used by operating 
organizations to order parts from supply by directly trans- 
mitting handwritten information to supply at the time it is 
written. 
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